FLY Security Notice

Published: October 15, 2026

FLY Security Notice

Published Date: 10/15/2026

Version: 1.0

Executive Summary

A security update is available for FLY that resolves a High-severity vulnerability. Customers using affected versions should upgrade as soon as possible.

Advisory Details

Severity: High

Affected Versions: Version 4.13.5 and earlier, unless the 4.13.5 hotfix has been applied

Resolved Version: Version 4.13.5 with the security hotfix applied

The update addresses a vulnerability related to input validation. Additional technical details are limited to reduce the risk of exploitation.

Suggested Actions

Customers running FLY Server versions that are affected are highly recommended to take the following step as soon as possible to mitigate the risk:

Mitigation Option: Perform Application Hotfix

Install FLY Server hotfix. Hotfix link below:

NOTE: If your instance of FLY Server has an environment specific hotfix applied or if you are not certain whether it does, please contact our technical support staff at support@avepoint.com to confirm appropriate upgrade or manual work-around steps.

AvePoint implements best-in-class techniques for identifying, protecting, and detecting cybersecurity threats. The information security and data privacy of our customers is AvePoint’s highest priority. If you have any questions about this and/or you are contacted by anyone else about this issue, please contact our security team immediately at security@avepoint.com.

For your additional information please find AvePoint’s reporting policy and response plan: https://www.avepoint.com/company/vulnerability-reporting-policy